Guide

How to Create Strong, Secure Passwords

Learn what makes a password strong, how length and character sets matter, and good password habits.

A password generator creates cryptographically random passwords with custom length and character sets. Strong, unique passwords are the single most effective defence against account takeover.

What makes a password strong

Password strength comes from randomness and length, not from clever substitutions. A truly random 16-character password using upper, lower, digits, and symbols has more than 95 bits of entropy — far beyond what brute force can crack. Predictable patterns (names, dates, "p@ssw0rd") add almost no entropy despite looking complex.

Length vs. character sets

Length matters more than variety. A 16-character lowercase password has about 75 bits of entropy; a 12-character mixed-set password has about 78 bits. Adding length is usually a better deal than adding symbol types, though using all four sets helps where sites require it.

How to use a password generator

  1. Set the length (16 or more is a good default).
  2. Include uppercase, lowercase, digits, and symbols.
  3. Generate and copy the password.
  4. Store it in a password manager — never reuse it.

Examples

A generated password like "k9$Qv2#mR7!pL4xZ" is random and 16 characters long. Compare that with "Summer2024!" — which looks similar but is one of the first patterns an attacker tries. The random one resists guessing; the human one does not.

Good password habits

  • Use a unique password for every account.
  • Store passwords in a reputable password manager.
  • Enable two-factor authentication where available.
  • Never share passwords or reuse them across sites.

Put it into practice

Use the Password Generator right now — free, in your browser, no sign-up required.

Try the Password Generator